13 matches found
CVE-2025-64369
Missing Authorization vulnerability in codepeople Contact Form Email contact-form-to-email allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form Email: from n/a through = 1.3.58...
CVE-2025-64369
Missing Authorization vulnerability in codepeople Contact Form Email contact-form-to-email allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form Email: from n/a through = 1.3.58...
CVE-2025-64369 WordPress Contact Form Email plugin <= 1.3.58 - Broken Access Control vulnerability
Missing Authorization vulnerability in codepeople Contact Form Email contact-form-to-email allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form Email: from n/a through = 1.3.58...
WordPress Findgo Theme <= 1.3.57 is vulnerable to Cross Site Request Forgery (CSRF)
Software Findgo Type Theme Vulnerable versions = 1.3.57 Fixed in 1.3.58 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2025-53587 Patch priority Low CVSS severity Low 8.8 Developer Claim ownership PSID 053168a85fa1 Credits 0xd4rk5id3 Required privile...
CVE-2024-54341
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LabelGrid LabelGrid Tools label-grid-tools allows Reflected XSS.This issue affects LabelGrid Tools: from n/a through = 1.3.58...
CVE-2024-54341
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LabelGrid LabelGrid Tools label-grid-tools allows Reflected XSS.This issue affects LabelGrid Tools: from n/a through = 1.3.58...
CVE-2024-54341
CVE-2024-54341 affects LabelGrid Tools (LabelGrid Tools plugin) up to version 1.3.58, with an Improper Neutralization of Input During Web Page Generation leading to Reflected XSS. Connected sources confirm the issue and indicate a patched state; exploitation details are not provided in the suppli...
CVE-2024-54341 WordPress LabelGrid Tools plugin <= 1.3.58 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LabelGrid LabelGrid Tools label-grid-tools allows Reflected XSS.This issue affects LabelGrid Tools: from n/a through = 1.3.58...
PT-2024-36226 · Unknown · Labelgrid Tools
Name of the Vulnerable Software and Affected Versions: LabelGrid Tools versions 1.3.58 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This problem allows Reflected XSS in LabelGrid Tools...
WordPress plugin LabelGrid Tools 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress LabelGrid Tools plugin <= 1.3.58 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by thiennv Patchstack Alliance in WordPress Plugin LabelGrid Tools versions = 1.3.58...
WyreStorm Apollo VX20 Security Vulnerability
Wyrestorm Apollo VX20 is an advanced conferencing video appliance from Wyrestorm. A security vulnerability exists in the WyreStorm Apollo VX20 prior to version 1.3.58, which stems from plaintext credentials that allow a remote attacker to access the SoftAP router via a simple HTTP GET request...
WyreStorm Apollo VX20 Security Vulnerability
Wyrestorm Apollo VX20 is an advanced conferencing video device from Wyrestorm. A security vulnerability exists in Wyrestorm Apollo VX20 prior to version 1.3.58, which stems from the TELNET service prompting for a password after a valid username is entered, allowing brute force attacks on valid...